Project_Velocity/infrastructure/desineuron_ingress/Caddyfile

{
	email admin@desineuron.in
	admin 127.0.0.1:2019
	auto_https enable_redirects
	servers {
		protocols h1 h2 h3
	}
	log {
		output file /var/log/caddy/admin.log
		format json
	}
}

(velocity_security_headers) {
	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
		X-Content-Type-Options "nosniff"
		X-Frame-Options "SAMEORIGIN"
		Referrer-Policy "strict-origin-when-cross-origin"
		-Server
	}
}

(velocity_proxy_headers) {
	header_up Host {host}
	header_up X-Real-IP {remote_host}
	header_up X-Forwarded-For {remote_host}
	header_up X-Forwarded-Host {host}
	header_up X-Forwarded-Proto {scheme}
	header_up X-Forwarded-Port {server_port}
}

api.desineuron.in {
	import velocity_security_headers

	log {
		output file /var/log/caddy/api.desineuron.in.access.log
		format json
	}

	@websockets {
		header Connection *Upgrade*
		header Upgrade websocket
	}

	reverse_proxy @websockets 127.0.0.1:8001 127.0.0.1:8000 {
		import velocity_proxy_headers
		flush_interval -1
		transport http {
			versions 1.1
			dial_timeout 30s
			read_timeout 3600s
			write_timeout 3600s
		}
	}

	reverse_proxy 127.0.0.1:8001 127.0.0.1:8000 {
		import velocity_proxy_headers
		transport http {
			versions 1.1
			dial_timeout 30s
			read_timeout 3600s
			write_timeout 3600s
		}
		lb_policy first
		health_uri /health
		health_interval 15s
	}
}

dreamweaver.desineuron.in {
	import velocity_security_headers

	log {
		output file /var/log/caddy/dreamweaver.desineuron.in.access.log
		format json
	}

	reverse_proxy 127.0.0.1:8082 {
		import velocity_proxy_headers
		transport http {
			versions 1.1
			dial_timeout 30s
			read_timeout 3600s
			write_timeout 3600s
		}
	}
}

velocity.desineuron.in {
	import velocity_security_headers

	log {
		output file /var/log/caddy/velocity.desineuron.in.access.log
		format json
	}

	import /etc/caddy/managed/llm_upstream.caddy_inc

	handle /api/* {
		reverse_proxy 127.0.0.1:8001 127.0.0.1:8000 {
			import velocity_proxy_headers
			transport http {
				versions 1.1
				dial_timeout 30s
				read_timeout 3600s
				write_timeout 3600s
			}
			lb_policy first
			health_uri /health
			health_interval 15s
		}
	}

	handle {
		reverse_proxy https://127.0.0.1:8443 {
			import velocity_proxy_headers
			transport http {
				tls_insecure_skip_verify
			}
		}
	}
}

ops.desineuron.in {
	import velocity_security_headers

	log {
		output file /var/log/caddy/ops.desineuron.in.access.log
		format json
	}

	reverse_proxy https://127.0.0.1:8443 {
		import velocity_proxy_headers
		transport http {
			tls_insecure_skip_verify
		}
	}
}

office.desineuron.in, git.desineuron.in, cloud.desineuron.in, projects.desineuron.in, talk.desineuron.in, vpn.desineuron.in {
	tls /etc/caddy/tls/fullchain.pem /etc/caddy/tls/privkey.pem
	import velocity_security_headers

	log {
		output file /var/log/caddy/access.log
		format json
	}

	reverse_proxy https://127.0.0.1:8443 {
		import velocity_proxy_headers
		transport http {
			tls_insecure_skip_verify
		}
	}
}

import /etc/caddy/managed/*.caddy